A merchant category code, or MCC, is a four-digit number that classifies a merchant by the kind of business it runs. It drives interchange pricing and rewards, but it is also a fraud and monitoring signal, and a category a bad merchant will try to misstate.
What is an MCC?
When a business is set up to accept cards, it is assigned a four-digit code that says what it sells: a grocery store, an airline, a jeweler, a betting site. That code is the merchant category code. It travels with every transaction the merchant runs, so any party in the chain can see, in shorthand, what kind of business the charge came from.
The MCC was built for money and reporting: it helps set interchange rates, decide which purchases earn rewards, and flag categories with tax or reporting rules. But the same code is a risk signal, because some categories carry far more fraud, chargeback, and money-laundering exposure than others.
For a fraud or AML team, the MCC is a quick read on expected behavior. A charge pattern that fits a grocery store looks very different from one that fits a crypto exchange or a gambling site, and a merchant whose real activity does not match its stated code is worth a second look.
What an MCC is used for
One small code does a surprising amount of work across pricing, rules, and risk.
Use of the MCC | What it drives |
Interchange pricing | Different categories carry different rates, so the MCC affects what a merchant pays. |
Rewards and offers | Card programs use the MCC to decide which spend earns points or cash back. |
Spend controls | Card issuers and businesses block or allow whole categories, such as gambling or cash advance. |
Risk monitoring | High-risk MCCs get closer watch for chargebacks, fraud, and laundering. |
Reporting rules | Some categories trigger tax or regulatory reporting obligations. |
What it looks like in practice
A merchant onboards under a low-risk retail code and processes quietly for a while. Over time its transactions start to look nothing like a retailer: large round-number charges, high chargeback rates, and buyer complaints that mention a service the retail code does not cover.
The acquirer's monitoring flags the mismatch between the stated MCC and the real activity. On review, the merchant is running a higher-risk business it hid behind a benign code to get cheaper pricing and lighter scrutiny, a form of transaction laundering. The account is reclassified, priced correctly, and put under enhanced monitoring or terminated.
Why MCCs matter for fraud and AML
The MCC sets the baseline for what normal looks like. Monitoring systems lean on it to expect certain amounts, frequencies, and dispute rates, so the code is a cheap way to apply the right level of scrutiny without inspecting every merchant by hand. High-risk categories, from gambling to crypto to adult content, can be watched more closely or restricted outright.
That is also why the MCC is a target for abuse. A merchant that wants cheaper interchange or lighter oversight has an incentive to misstate its category, and transaction launderers deliberately route prohibited sales through an innocent-looking code. Watching for a gap between the declared MCC and the actual pattern of activity is one of the more reliable ways to catch a merchant hiding what it really does.
What to watch in the data
- Code-versus-behavior gap. Activity that does not fit the stated category, such as large or round-number charges under a small-retail code, is a core red flag.
- High-risk categories. Gambling, crypto, adult, and money-service codes warrant tighter monitoring for fraud and laundering.
- Chargeback concentration. A merchant whose dispute rate is far above its category norm may be misclassified or turning bad.
- Category switching. Frequent MCC changes can be an attempt to dodge monitoring, controls, or pricing.
- Blocked-category workarounds. Charges that mimic an allowed MCC to slip past spend controls suggest deliberate misclassification.
Quick questions
Who assigns the MCC?
The acquirer assigns it when the merchant is onboarded, following the card networks' category definitions. It should reflect the merchant's primary line of business, and it can be corrected if the activity clearly does not match.
Can a merchant have the wrong MCC by accident?
Yes. Businesses that span several activities, or that were onboarded quickly, sometimes get a code that fits poorly. That is why a mismatch is a prompt to investigate rather than proof of fraud on its own.
How do MCCs relate to money laundering?
Certain categories carry higher laundering risk, and launderers may hide prohibited sales behind a clean MCC. Monitoring high-risk codes and watching for activity that contradicts the stated category are standard AML practices.
Do MCCs block certain purchases?
They can. Issuers and businesses use MCC-based controls to allow or block whole categories, such as preventing a corporate card from being used for gambling or cash advances. The control is only as good as the accuracy of the code.
Why would a merchant fake its category?
To pay lower interchange, to earn undeserved rewards for cardholders, or to escape the closer scrutiny a high-risk code attracts. That misstatement is often part of transaction laundering, where a risky business hides behind an approved one.
What to know alongside Merchant category code (MCC)
2026 Fraud and AML Report
Skip the predictions. This report breaks down what fraud and AML teams are actually dealing with, and how to respond.